crisna.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6e:a5:4a:66:4b:97:ae:27:24:e0:06:e5:7f:40:6f:cb:d3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crisna.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:a5:4a:66:4b:97:ae:27:24:e0:06:e5:7f:40:6f:cb:d3
Serial Number (int): 298987627080650848152584907820575145053139
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:59:61:dc:2a:fd:9d:3d:51:cf:62:65:a6:56:d0:d8:3d:9b:48:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:17:1b:51:4a:94:46:07:c8:ca:9c:2b:7b:8d:ac:b9:8a:22:22:df
Fingerprint (sha256): 0b:7c:87:ed:b6:b1:a0:fe:98:44:17:42:bb:a0:26:49:63:51:5e:bc:cb:e5:1e:1b:70:a3:b8:c8:f6:55:86:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crisna.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crisna.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acehuman.com
*.alergicos.com
*.allertonfloorcoveringny.com
*.amitan.com
*.apexpools.com
*.belflower.com
*.bundleware.com
*.buyofftheplan.com
*.bzrmester.com
*.chiafullo.com
*.cockroach.com.au
*.comaro.com
*.crisna.com
*.dazzie.com
*.desmonds.com
*.ducminh.com
*.expassin.com
*.facekora.com
*.faizul.com
*.fetayo.com
*.finalexpenselifeinsurance.com
*.frillys.com
*.gearin.com
*.guialaboralsrl.com
*.heuvelmans.com
*.inventlms.com
*.jariel.com
*.lamaestra.com
*.liburuak.com
*.maintenanceboss.com.au
*.nasygal.com
*.newmontravel.net
*.onlineuniversities.com.au
*.pastebin.at
*.remobil.com
*.ronwhitepresale.com
*.roznov.com
*.sariq.com
*.simulater.com
*.solynieve.com
*.supbarre.com
*.tarj.com
*.tinhangngay.com
*.titlemaz.com
*.vigoron.com
*.volatil.com
*.washingtonjournal1.xyz
*.webinarjam.co
*.wowies.com
*.yonso.com
acehuman.com
alergicos.com
allertonfloorcoveringny.com
amitan.com
apexpools.com
belflower.com
bundleware.com
buyofftheplan.com
bzrmester.com
chiafullo.com
cockroach.com.au
comaro.com
crisna.com
dazzie.com
desmonds.com
ducminh.com
expassin.com
facekora.com
faizul.com
fetayo.com
finalexpenselifeinsurance.com
frillys.com
gearin.com
guialaboralsrl.com
heuvelmans.com
inventlms.com
jariel.com
lamaestra.com
liburuak.com
maintenanceboss.com.au
nasygal.com
newmontravel.net
onlineuniversities.com.au
pastebin.at
remobil.com
ronwhitepresale.com
roznov.com
sariq.com
simulater.com
solynieve.com
supbarre.com
tarj.com
tinhangngay.com
titlemaz.com
vigoron.com
volatil.com
washingtonjournal1.xyz
webinarjam.co
wowies.com
yonso.com

Other certificates including the domain name crisna.com

(limited to 100 certificates)
crisna.com
crisna.com
crisna.com
rinnovamento.com
crisna.com
crisna.com
sangama.com
crisna.com
badessa.com
crisna.com
crisna.com
crisna.com
dasual.com
crisna.com
dejaynes.com

Certificate

The complete raw certificate details for crisna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298987627080650848152584907820575145053139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 09:26:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 09:26:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crisna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913426541901557081322542280113157641403384487504619438960428500055931830071404244479285260284096186702727458908145128510145766736259240067448420869758691855349887304799262668855566960786241009300239364562755243356490328749565526845864695802675809144104667410032479362473598416845686212370111061114634789643306308001911965285242096817285412142852557036752072680430786295207594016796110277823882235685309866748281049548953686625877644885451736320999550936219163933356313219157238672338362275110253818782359729460659380207218447563170918422463379454390298825639036948123063159158788989744053950060812095731893942723090955159936609303403307431132119805423411286799469203084851624177404502525018493655116925884667234039245342467942729303630125570065595669793747676612722152876904572669153863931798589792926483513487481764556555160995834426147676496217916112167811491512444403116632473102330454835148324012946576011980903604173892247876312108633084545970485913876927100002177948063661440160090803818428577734279681066421314032380359703013507758686853940680560977565793155067088358759729330338130998512731770820168662059017412758381792047402519666733635599090053295544085092949630276673270914218480282387222742771408380921675884689506662991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f5961dc2afd9d3d51cf6265a656d0d83d9b48b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acehuman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alergicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allertonfloorcoveringny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apexpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belflower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bundleware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyofftheplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bzrmester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiafullo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cockroach.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crisna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dazzie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desmonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ducminh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expassin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facekora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faizul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finalexpenselifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frillys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gearin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guialaboralsrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heuvelmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inventlms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jariel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamaestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liburuak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maintenanceboss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nasygal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newmontravel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlineuniversities.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pastebin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronwhitepresale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roznov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sariq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simulater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solynieve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supbarre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinhangngay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titlemaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vigoron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volatil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.washingtonjournal1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webinarjam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wowies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yonso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acehuman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alergicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allertonfloorcoveringny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apexpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belflower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundleware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyofftheplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bzrmester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiafullo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockroach.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dazzie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducminh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expassin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facekora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faizul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalexpenselifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frillys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guialaboralsrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heuvelmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventlms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jariel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamaestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liburuak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenanceboss.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasygal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmontravel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineuniversities.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastebin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronwhitepresale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roznov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sariq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solynieve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supbarre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinhangngay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlemaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vigoron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volatil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonjournal1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinarjam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yonso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e37596a5b000004030046304402206b6be799e2d28546bb7bb24852ac67dcf51fce179ff2ba2d6c2f0c0e04ef7e5f022003634cb7a163aea1832a69f6ad89e93fb449a5ebf86f45b2e87aba49a0358454007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e37596a5800000403004630440220707a7bf12ac811064343bd496a3a7a3364127d7a02cb35a2427b4b410e4e24e102206458ff3d766396e3ab94cbe2f4dca0f8862c15d154fb1c3ba8e5f87b4ad1c264
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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